my httpd.conf

<Directory /var/www/*/*>
Options +Includes -Indexes
AllowOverride All
Order allow,deny
Allow from all
<Files ~ "^\.ht">
Deny from all
</Files>
</Directory>


------------------------------------------------------------------------------

RewriteEngine on

##point to installation directory
##if it is the root dir,enter /
##else /otherdir
RewriteBase  /var/www/web1/html

RewriteCond %{QUERY_STRING} ^d=([a-zA-Z0-9]{8,12})$
RewriteRule ^$ download.php?id=%1

RewriteCond %{QUERY_STRING} ^d=([a-zA-Z0-9]{12,16})$
RewriteRule ^$ delete.php?id=%1

RewriteRule   ^file/([0-9]+)/(.*)$ download.php?id=$1&type=2 [L]
RewriteRule   ^([a-z]{2})/file/([0-9]+)/(.*)$ download.php?setlang=$1&id=$2&type=2 [QSA,L]
RewriteRule   ^folders/([0-9]+)/(.*)$ folders.php?fid=$1&%{QUERY_STRING} [L]
RewriteRule   ^([a-z]{2})/folders/([0-9]+)/(.*)$ folders.php?setlang=$1&fid=$2&%{QUERY_STRING} [QSA,L]

RewriteRule   ^([a-z]{2})/top/([0-9]+)\.html$ top.php?setlang=$1&s=$2&type=1 [L]
RewriteRule   ^top/([0-9]+)\.html$ top.php?s=$1&type=1 [L]

RewriteRule ^([a-z]{2})$ ?setlang=$1 [QSA,L]
RewriteRule ^([a-z]{2})/$ ?setlang=$1 [QSA,L]
RewriteRule ^([a-z]{2})/(.*)\.php$ $2.php?setlang=$1 [QSA,L]

<IfModule mod_security.c>
  # Turn off mod_security filtering.
  SecFilterEngine Off

  # The below probably isn't needed,
  # but better safe than sorry.
  SecFilterScanPOST Off
</IfModule>



[Mon Oct 01 16:41:32 2007] [error] [client ip] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /var/www/web1/html/getfile.php, referer: http://domain.tld//getfile.php/